Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
File: k4vok1GoGkLfhHvzkxNy0JgwREY.cer (raw, json)
Hash identifier: cKsSGuQFd3AjbXYRZ//CJAVty1HMkjK5sDZNqYT49s4=
Subject key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FA1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:38:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327987
IP: 41.78.244.0/22
IP: 196.250.192.0/21
IP: 2c0f:6800::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12193 (0x2fa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:38:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F3412AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:80:2a:9f:74:2e:b8:72:8d:1e:76:ce:12:
b3:66:31:c1:16:42:90:26:85:69:bf:8e:b5:9b:b1:
79:34:dd:42:6a:00:52:f0:84:85:a5:e8:63:a2:bb:
bb:58:fa:4b:04:bc:c1:1c:e2:aa:bf:c3:0e:82:d1:
cd:e3:49:b1:7b:8d:e9:ab:90:92:df:3f:1e:dd:7a:
68:bd:63:65:99:0d:4f:f5:ce:e5:ee:96:25:04:49:
61:06:ad:60:c2:77:62:e5:38:58:05:cc:22:3a:fd:
1e:8d:a4:cd:5d:78:08:58:ca:86:19:42:6a:96:a7:
45:ef:89:4b:08:8f:c9:37:d8:81:ea:50:b6:d6:48:
d7:6b:ad:69:4b:49:2d:7c:7d:5c:27:46:57:cc:0a:
fa:34:8b:70:92:bd:b4:5f:8a:19:fd:82:26:94:71:
68:38:63:b4:a8:5c:b2:55:e7:69:74:e4:6f:88:25:
35:12:36:9c:80:4c:cf:4e:d7:71:b0:b5:4a:20:cb:
99:74:db:18:ad:f9:bc:f8:d6:a0:dd:7a:cc:de:4c:
8b:ed:9e:cb:f2:ea:bf:a4:1a:5f:53:b0:65:b4:af:
20:49:1e:37:b2:62:b4:41:e8:c2:0a:c7:d2:70:3b:
9c:63:a0:1d:8e:d3:dc:bd:dd:6f:ef:c0:de:23:0a:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327987
sbgp-ipAddrBlock: critical
IPv4:
41.78.244.0/22
196.250.192.0/21
IPv6:
2c0f:6800::/32
Signature Algorithm: sha256WithRSAEncryption
78:13:c6:a6:58:eb:4f:50:68:d7:9b:47:d7:1d:99:47:a4:a1:
dd:85:0e:f6:b7:84:be:35:c2:24:67:c1:84:4f:84:5b:f4:45:
ba:c0:01:b5:64:3c:51:6f:2d:87:04:6f:2e:38:94:80:5c:51:
fe:b3:2f:79:0a:1d:cd:2c:9e:56:02:39:ac:bf:b3:6a:f3:a9:
50:51:e4:b3:0e:be:44:40:51:b4:3f:17:2b:01:07:2d:c1:e3:
91:f8:b1:90:bb:21:57:e3:76:73:e1:71:a4:12:46:89:76:15:
4c:1d:ad:12:e5:a0:2b:b8:e8:94:32:a4:02:ff:8f:6c:25:34:
cd:93:7b:c5:7b:0f:f9:a3:4e:26:89:29:65:fa:36:15:e8:86:
04:53:e3:a3:8b:e0:36:d4:ba:b4:90:f0:cb:a8:f8:a6:f3:50:
08:6d:ed:bc:04:f5:d7:04:2b:3e:09:92:c3:6e:15:5b:e2:7f:
f9:85:13:96:c4:1d:12:35:01:e5:59:30:d9:9a:e7:58:db:74:
2d:38:5f:a0:6a:22:f4:e5:d2:a5:a2:e3:56:59:72:a1:a6:51:
44:2a:14:96:14:07:8a:66:30:02:27:58:d5:20:80:42:86:32:
9d:0d:ae:6e:92:10:32:17:a4:a6:04:f9:a2:7e:1c:a4:f6:ea:
c0:7a:aa:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:57:26 2025 by rpki-client